Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/SWGGwTWhUC7-8cN1FRppyYGPeS4.roa
File:                     SWGGwTWhUC7-8cN1FRppyYGPeS4.roa (raw, json)
Hash identifier:          k1FF1qJjxJ+84Xj0ag41qsB7S2U6huNrF9zWjbd7n8s=
Subject key identifier:   49:61:86:C1:35:A1:50:2E:FE:F1:C3:75:15:1A:69:C9:81:8F:79:2E
Certificate issuer:       /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial:       019011F17336B8FF223DDC8AA539DB8A99D6
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/SWGGwTWhUC7-8cN1FRppyYGPeS4.roa
Signing time:             Thu 13 Jun 2024 14:12:34 +0000
ROA not before:           Thu 13 Jun 2024 14:12:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     212238
IP address blocks:        213.182.218.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 30 Sep 2024 13:11:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:11:f1:73:36:b8:ff:22:3d:dc:8a:a5:39:db:8a:99:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
        Validity
            Not Before: Jun 13 14:12:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=496186c135a1502efef1c375151a69c9818f792e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7e:05:e7:67:41:33:ef:f6:87:96:4f:d6:6d:
                    ce:29:83:10:0c:d7:02:99:ec:ab:30:7b:5d:25:5d:
                    0b:cc:97:61:00:89:24:6f:31:ed:59:c2:f5:ec:80:
                    c4:b7:24:0e:63:19:63:f1:c1:cd:c9:58:2b:4a:79:
                    6b:56:0b:5c:a4:6f:4e:be:9a:b2:bd:10:f8:43:71:
                    80:af:cd:a8:a1:cc:00:da:45:fa:c3:f3:60:ae:2d:
                    1f:4e:f8:50:66:51:4a:7d:f3:b8:f0:22:e8:87:b6:
                    56:bb:5e:08:17:1e:06:17:60:c0:56:82:2b:79:a9:
                    05:08:31:6c:ab:5e:66:3b:64:02:43:af:88:1d:0c:
                    49:59:fd:d8:02:45:d8:35:85:66:03:50:61:1a:52:
                    55:f2:9d:21:6c:83:5f:27:b8:62:6f:91:77:bb:ba:
                    77:9b:c2:14:46:2a:bb:29:72:8c:45:89:4f:ac:0b:
                    a6:a9:68:c1:c7:b2:16:64:d6:f5:25:05:e8:e5:55:
                    d8:63:fc:5c:a4:96:b1:2f:9f:da:5a:35:57:73:93:
                    12:aa:f7:8f:16:6a:c1:32:8f:39:f5:89:5e:e6:21:
                    2b:a0:16:bf:e5:99:60:52:a0:e4:cc:df:5b:a0:b4:
                    8e:6c:f1:f7:5e:f8:e5:a5:19:fb:82:56:04:8f:24:
                    c8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:61:86:C1:35:A1:50:2E:FE:F1:C3:75:15:1A:69:C9:81:8F:79:2E
            X509v3 Authority Key Identifier:
                keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/SWGGwTWhUC7-8cN1FRppyYGPeS4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.182.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:f3:8b:88:4b:f2:2b:96:98:ca:ac:c1:3d:41:ed:b5:07:b8:
         dc:cc:f3:02:dc:31:f5:d6:76:d9:db:f7:ed:c8:8f:ac:61:13:
         1e:99:e1:94:18:25:51:79:92:61:f6:bf:30:0b:7b:ad:95:1a:
         3b:92:38:9e:64:15:25:1b:48:31:35:cd:d8:4a:1d:c3:62:ed:
         b8:0d:50:b1:29:7e:1c:0c:26:fa:74:55:5b:a0:ed:44:be:0e:
         a1:2b:26:35:47:f8:74:37:8b:09:40:7e:75:ee:fb:5a:fd:fa:
         16:6e:71:4f:18:3f:bd:52:5c:24:22:c5:04:34:9c:47:4a:89:
         82:61:f5:76:ea:ac:4d:87:25:43:42:c2:fa:bd:ab:a3:82:5f:
         cd:31:98:3c:b3:95:cb:5d:11:cf:dd:1e:bd:7f:33:70:82:af:
         10:7e:a2:46:a7:5d:d6:c2:a3:f6:66:c9:31:b6:b3:32:43:84:
         db:73:6a:e8:5b:7a:e9:f6:8a:e5:f0:45:58:73:78:93:e5:5a:
         1f:d1:15:55:4e:d3:c7:84:b3:fa:f5:c7:d4:a5:5d:a2:d0:0c:
         ec:0d:da:0c:16:21:62:06:c0:66:aa:9a:7f:0c:86:53:24:89:
         e8:2d:53:3d:97:d7:50:af:37:ba:8b:10:01:e6:3b:f7:2e:30:
         8f:05:29:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 30 15:37:23 2024 by rpki-client on console-fra.rpki-client.org